Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
156.227.232.96 has a threat confidence score of 48%. This IP address from Japan (AS138152, YISU CLOUD LTD) has been observed in 2 honeypot sessions targeting SSH protocols. First observed on March 27, 2026, most recently active March 27, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.